$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f3d290f-ba07-44ec-8836-8683ef177077.roa File: 8f3d290f-ba07-44ec-8836-8683ef177077.roa (raw, json) Hash identifier: Mx37/+diW3L8Ko/KtKf/ZT/PfB63NAaWjZSF3qD6TXs= Subject key identifier: C3:7E:43:5C:24:33:3C:CC:5B:B3:58:08:A3:9C:CE:AD:F9:D8:E3:09 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2A48A0EEE6BE4740C25C5AD1302BA39DB8057D6A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f3d290f-ba07-44ec-8836-8683ef177077.roa Signing time: Mon 21 Apr 2025 16:30:09 +0000 ROA not before: Mon 21 Apr 2025 16:30:09 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:48:a0:ee:e6:be:47:40:c2:5c:5a:d1:30:2b:a3:9d:b8:05:7d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:30:09 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=9ee72b3745f5565c0fdc3065d716a938748f7bc3f2f37dfe73466f952b35ec6d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c4:4c:fb:0e:fe:f6:65:57:89:28:84:83:30: 2d:fe:f4:09:09:07:41:98:77:23:ba:69:71:d2:13: 43:30:78:7e:d1:52:87:bc:0d:b6:e3:9d:03:18:9c: fd:ef:5f:9f:fb:cf:9e:75:8d:e3:6e:56:ea:b0:32: 12:04:df:cb:a0:38:5a:8e:a1:67:de:00:6b:af:25: 58:5f:6c:64:8f:3d:51:9a:ae:5f:80:df:2c:fe:bd: 5a:dc:3b:e8:54:cf:bb:9f:4b:01:d7:d2:ed:da:c0: 32:a5:c9:c1:1b:2f:9b:11:74:2c:5b:44:8c:65:a5: ee:cd:fb:97:18:0d:cb:98:99:5a:00:26:72:17:6d: 08:a2:30:95:54:6c:61:3f:59:f6:e9:55:41:64:df: bb:73:78:a7:d9:25:eb:38:2a:e2:b5:1d:02:c1:e9: 0c:12:9a:12:d1:52:18:9f:c3:a9:08:79:58:e0:58: 7a:af:2c:11:7a:a5:b9:f9:7d:9f:87:18:15:6b:41: d6:46:e0:e0:e9:b3:ed:51:16:7d:c0:a9:4c:93:3f: 22:5c:2a:56:79:15:0c:0e:4a:9a:f7:00:1c:cd:48: 83:57:f8:97:e6:70:99:16:62:a3:df:89:8e:28:2e: a5:bc:78:6f:11:ab:86:e4:cc:87:b5:dc:1e:96:e1: 3b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7E:43:5C:24:33:3C:CC:5B:B3:58:08:A3:9C:CE:AD:F9:D8:E3:09 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f3d290f-ba07-44ec-8836-8683ef177077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:e000::/40 Signature Algorithm: sha256WithRSAEncryption 0a:a6:75:71:0c:23:f1:41:36:78:94:71:be:cb:e7:6d:ae:56: fb:2f:6a:a8:90:06:a0:52:51:1f:bb:53:f2:1e:47:1c:79:b1: 80:a1:ce:17:6f:de:82:aa:15:59:1c:7a:54:f0:59:11:34:51: 1c:d3:60:9a:ed:e8:71:8e:76:ab:af:e2:fe:ea:7f:e1:e3:c6: 54:6a:37:41:be:36:a2:75:c5:a1:47:3c:90:57:be:da:86:0a: 6d:ba:a3:e3:ff:01:e5:4b:d4:29:79:9f:84:ad:2e:e1:42:6f: ce:90:1b:46:b8:a6:4c:01:3b:c9:cd:c2:27:28:8c:6e:a6:c0: 4a:a1:fc:da:24:31:28:2a:90:06:0c:03:b8:bb:b9:c1:e2:7a: 6b:c6:bb:d0:11:3b:92:56:7a:79:c8:a4:e8:2b:a3:dd:74:0d: e6:4f:c2:d0:81:57:90:66:12:59:7a:7a:a6:17:39:c4:51:17: a8:d8:b2:6c:61:cd:b5:3d:71:58:b9:4a:28:ed:a7:5b:4f:ce: e3:32:4b:b3:7e:76:7c:9b:ae:fd:16:3a:72:d1:27:e7:54:03: 64:e7:39:08:2c:bb:e8:b4:00:3f:f0:99:b1:2c:d9:cc:3e:fb: 2c:02:1f:5d:22:21:22:47:13:04:f0:7d:74:a0:07:52:da:5a: c7:f8:84:91 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKkig7ua+R0DCXFrRMCujnbgFfWowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MzAwOVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAOWVlNzJiMzc0NWY1NTY1YzBmZGMz MDY1ZDcxNmE5Mzg3NDhmN2JjM2YyZjM3ZGZlNzM0NjZmOTUyYjM1ZWM2ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8RM+w7+9mVXiSiEgzAt/vQJCQdB mHcjumlx0hNDMHh+0VKHvA22450DGJz971+f+8+edY3jblbqsDISBN/LoDhajqFn 3gBrryVYX2xkjz1Rmq5fgN8s/r1a3DvoVM+7n0sB19Lt2sAypcnBGy+bEXQsW0SM ZaXuzfuXGA3LmJlaACZyF20IojCVVGxhP1n26VVBZN+7c3in2SXrOCritR0CwekM EpoS0VIYn8OpCHlY4Fh6rywReqW5+X2fhxgVa0HWRuDg6bPtURZ9wKlMkz8iXCpW eRUMDkqa9wAczUiDV/iX5nCZFmKj34mOKC6lvHhvEauG5MyHtdweluE7qwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMN+Q1wkMzzMW7NYCKOczq352OMJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhmM2QyOTBmLWJhMDctNDRlYy04ODM2LTg2ODNlZjE3NzA3Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaueAwDQYJKoZIhvcNAQELBQADggEBAAqmdXEMI/FBNniUcb7L 522uVvsvaqiQBqBSUR+7U/IeRxx5sYChzhdv3oKqFVkcelTwWRE0URzTYJrt6HGO dquv4v7qf+HjxlRqN0G+NqJ1xaFHPJBXvtqGCm26o+P/AeVL1Cl5n4StLuFCb86Q G0a4pkwBO8nNwicojG6mwEqh/NokMSgqkAYMA7i7ucHiemvGu9ARO5JWennIpOgr o910DeZPwtCBV5BmEll6eqYXOcRRF6jYsmxhzbU9cVi5Sijtp1tPzuMyS7N+dnyb rv0WOnLRJ+dUA2TnOQgsu+i0AD/wmbEs2cw++ywCH10iISJHEwTwfXSgB1LaWsf4 hJE= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:47 2025 by rpki-client on console.sobornost.net